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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1-9. (Canceled) 

1 0. (Currently Amended) A method for providing access management, 
comprising: 

(^authenticating a user to a first and a second server machine, whereby 
the first and the second server machin e machines are configured to comprise a 
secured item; and 

(b)-preventing access to a first the second server machine one of the first 
and the s e cond serv e r machines while the user is accessing a s e cond the first 
server machine one of the first and th e second server machin e s through a first 
connection ; and 

wherein upon receiving an access request from the user to access the 
second server machine, disconnecting the user is disconnected from the first one 
of the first and the s e cond s erv e r machin e s connection before being connected to 
establishing a second connection that allows the user to access the second one 
server machine of the first and the second s e rver machin e s . 

1 1 . (Currently Amended) The method as recited in claim 29, wherein step 
(art) authenticating the user comprises auth e nticates authenticating both the user and a 
client machine being used by the user. 
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12. (Currently Amended) The method as recited in claim 10, wherein the first 
and the second server machine machines are access points for the user to gain access to 
the secured item. 

13. (Previously Presented) The method as recited in claim 29, wherein: 
when the user is at a first location, the user interacts over a network with 

the first server machine, and 

when the user is at a second location, the user interacts over a network 
with the second server machine using a second client machine at the second 
location. 

14. (Currently Amended) The method as recited in claim 30 10, wherein the 
method further comprises: 

determining, prior to st e ps (bl), (b2), (b3), and (b 4 ) disconnecting the 
user from the first connection , whether the user is permitted to gain access from 
through a second location to the secured item via the second server machine. 

15. (Currently Amended) The method as recited in claim 29, wherein step 
(a4-) the authenticating the user with the first server occurs while the user is at a first 
location, and wherein step (a2) receiving the access request occurs while the user is at a 
second location. 

16. (Currently Amended) The method as recited in claim 17, wherein the 
method the authenticating the user further comprises: 



Atty. Dkt. No. 2222.5390002 



- 4 - HILDEBRAND et al 

Reply to Office Action of October 1 0, 2008 Appl. No. 1 0/076, 1 8 1 

(a4) upon receiving the current access request to access the secured 
item via the second server machine, determining permitted locations from which 
the user is permitted to access-the secured item; 

(aS) determining whether the second location is one of the permitted 
locations for the user; and 

(a6) bypassing st e ps (bl), (b2), (b3), and (b1) the disconnecting the 
user from the first connection when st e p (a5) d e t e rmines in response to the 
determination that the second location is not one of the permitted locations for the 
user. 

17. (Previously Presented) The method as recited in claim 30, wherein: 
when the user is at a first location, the user interacts over a network with 

the first server machine using a first client machine at the first location, and 

when the user is at a second location, the user interacts over a network 
with the second server machine using a second client machine at the second 
location. 

18. (Currently Amended) A computer readable medium containing 
instructions for controlling at least one processor by a method comprising: 

(a) -authenticating a user to a first and a second server machine, whereby 
the first and the second server machin e machines are configured to comprise a 
secured item; and 

(b) -preventing access to a first the second server machine on e of the first 
and th e s e cond serv e r machin e s while the user is accessing a s e cond the first 
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server machine one of the first and the second s e rver machines through a first 
connection ; and 

wher e in upon receiving an access request from the user to access the 
second server machine, disconnecting the user is disconnected from the first one 
of th e first and the second s e rv e r machin e s connection before being connected to 
establishing a second connection that allows the user to access the second one 
server machine of the first and the s e cond s e rv e r machines . 

19. (Previously Presented) The computer readable medium as recited in 
claim 31, wherein: 

when the user is at a first location, the user interacts over a network with 
the first server machine, and 

when the user is at a second location, the user interacts over a network 
with the second server machine using a second client machine at the second 
location. 

20. (Previously Presented) The computer readable medium as recited in 
claim 32, further comprising: 

determining, prior to the reconfiguring of either the first local module at 
the first server machine or the second local module at the second server machine, 
whether the user is permitted to gain access from a second location to the secured 
item via the second server machine. 

21 . (Currently Amended) A system for providing access management, 
comprising: 
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an access control device, wherein the access control device authenticates a 
user to a first and a second server machine, whereby the first and the second 
server machin e machines are configured to comprise a secured item, and prevents 
access to a first the second server machine on e of the first and the second server 
machines while the user is accessing a second the first server machine ene of the 
first and the second machines through a first connection ^ ;]] , and wherein , upon 
receiving an access request from the user to access the second server machine, 
disconnects the user is disconnected from the first one of the first and the second 
server machines connection before being connect e d to establishing a second 
connection that allows the user to access the second ene server machine of th e 
first and the second s e rver machines . 

22. (Currently Amended) The computer readable medium as recited in claim 
3 1 , wherein s tep (al) authenticating a user comprises authenticates authenticating both 
the user and a client machine being used by the user. 

23. (Previously Presented) The computer readable medium as recited in 
claim 32, further comprising: 

determining, prior to reconfiguring the first local module at the first server 
machine and the second local module at the second server machine, whether the 
user is permitted to gain access from a second location to the secured item via the 
second server machine. 

24. (Currently Amended) The computer readable medium as recited in claim 
33, wherein step (a) the authenticating the user further comprises: 
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(a4) upon receiving the current access request to access the secured item 
via the second server machine, determining permitted locations from which the 
user is permitted to gain access to the secured item; 

(a5) determining whether the second location is one of the permitted 
locations for the user; and 

(a6) bypassing steps (bl), (b2), (b3), and (b4) the disconnecting the user 
from the first connection when step (a5) d e termines in response to the 
determination that the second location is not one of the permitted locations for the 
user. 

25. (Previously Presented) The system as recited in claim 21, wherein the 
access control device authenticates both the user and a client machine being used by the 
user. 

26. (Currently Amended) The system as recited in claim 21, wherein the first 
and the second server machine machines are access points for the user to gain access to 
the secured item. 

27. (Previously Presented) The system as recited in claim 35, wherein the 
access control device determines, prior to reconfiguring the first local module at the first 
server machine and the second local module at the second server machine, whether the 
user is permitted to gain access from a second location to the secured item via the second 
server machine. 



28. 



(Canceled) 
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29. (Currently Amended) The method as recited in claim 10, wherein the 
authenticating the user step (a) comprises: 

(a+} authenticating the user with the first server machine with respect 
to a previous access request; 

(a2) subsequently receiving a curr e nt the access request via the second 
server machine; and 

(a£) authenticating the user with the second server machine with 
respect to the current access request. 

30. (Currently Amended) The method as recited in claim 29, wherein the 
disconnecting the user from the first connection step (b) comprises: 

(W) upon receiving the current access request via the second server 
machine, identifying a first local module previously supporting the user at the 
first server machine; 

(b2) reconfiguring the first local module at the first server machine to 
remove support for the user at the first server machine; 

(b3) identifying a second local module to support the user at the second 
server machine; and 

(b4) reconfiguring the second local module at the second server 
machine to add support for the user at the second server machine. 

3 1 . (Currently Amended) The computer readable medium as recited in claim 
1 8, wherein the authenticating the user step (a) comprises: 
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(a±) authenticating the user with the first server machine with respect 
to a previous access request; 

(a2) subsequently receiving a current the access request via the second 
server machine; and 

(a3) authenticating the user with the second server machine with 
respect to the current access request. 

32. (Currently Amended) The computer readable medium as recited in claim 
3 1 , wherein the disconnecting the user from the first connection step (b) comprises: 

(W-) upon receiving the curr e nt access request via the second server 
machine, identifying a first local module previously supporting the user at the 
first server machine; 

(b2) reconfiguring the first local module at the first server machine to 
remove support for the user at the first server machine; 

(b^) identifying a second local module to support the user at the second 
server machine; and 

(b4) reconfiguring the second local module at the second server 
machine to add support for the user at the second server machine, 

33. (Previously Presented) The computer readable medium as recited in 
claim 32, wherein: 

when the user is at a first location, the user interacts over a network with 
the first server machine using a first client machine at the first location, and 
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when the user is at a second location, the user interacts over a network 
with the second server machine using a second client machine at the second 
location. 

34. (Currently Amended) The system as recited in claim 21, wherein the 
access control device: 

authenticates the user with the first server machine with respect to a 
pervious access request; 

subsequently receives a current the access request via the second server 
machine; and 

authenticates the user with the second server machine with respect to the 
current access request. 

35. (Currently Amended) The system as recited in claim 34, wherein the 
access control device: 

identifies a first local module previously supporting the user at the first 
server machine upon receiving a current the access request to access the secure 
item via the second server machine; 

reconfigures the first local module at the first server machine to remove 
support for the user at the first server machine; 

identifies a second local module to support the user at the second server 
machine; and 

reconfigures the second local module at the second server machine to add 
support for the user at the second server machine. 
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